Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
File:                     XgJGv_4E4tbx4ZOf5jhqJN_N964.mft (raw, json)
Hash identifier:          s086SYSLXX38EdCNj1JemPOsvJgeNzgY3naIYcSg5Y8=
Subject key identifier:   D2:F8:9C:50:7E:DB:7A:18:E6:8D:06:E3:2E:1B:6D:16:0D:5E:A6:90
Authority key identifier: 5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE
Certificate issuer:       /CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
Certificate serial:       0194BBCEBB63CC84385858D7272D7969129D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft
Manifest number:          13B9
Signing time:             Fri 31 Jan 2025 10:01:15 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:15 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:15 +0000
Files and hashes:         1: XgJGv_4E4tbx4ZOf5jhqJN_N964.crl (hash: xDKvITEGZ37h6sHUyZ/d6hmE+9YUZ9tDrmQ5lug1TeA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:bb:63:cc:84:38:58:58:d7:27:2d:79:69:12:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e0246bffe04e2d6f1e1939fe6386a24dfcdf7ae
        Validity
            Not Before: Jan 31 10:01:15 2025 GMT
            Not After : Feb  1 10:01:15 2025 GMT
        Subject: CN=d2f89c507edb7a18e68d06e32e1b6d160d5ea690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9d:e8:be:bc:2a:65:07:67:d3:0e:0f:89:bf:
                    14:8a:37:b3:76:db:a6:87:7b:00:a3:a0:6e:6b:7d:
                    6e:26:51:4c:42:c6:35:37:00:93:c6:9a:70:62:8b:
                    ea:b6:ac:7c:ff:27:a3:24:41:8d:48:d7:37:70:b1:
                    67:f5:40:96:66:e6:89:cc:b6:fa:7d:9e:b9:c6:48:
                    f8:14:f6:93:6b:27:ee:21:54:c3:c5:fa:2b:be:9c:
                    38:80:d3:cd:cf:34:b9:98:cb:2c:ad:ba:8a:37:83:
                    43:98:d0:83:db:41:d9:81:26:eb:20:f9:05:7e:28:
                    77:c7:cb:9d:0f:1d:08:b7:56:bf:da:2e:f4:08:70:
                    6b:62:bc:f2:d9:43:f4:50:aa:dc:dc:4e:3c:73:f3:
                    32:7b:6d:10:1c:bf:9e:9e:9c:38:97:b2:36:e4:5d:
                    d6:7d:83:b8:1d:ef:ea:77:dd:0c:f1:1e:d5:8b:8e:
                    5f:8f:60:2f:da:53:d1:cc:50:99:27:f8:b9:8b:ae:
                    1a:03:55:b7:e4:c6:6e:56:41:6a:8f:e3:ce:df:2d:
                    df:a0:2f:22:b8:f4:33:87:7c:90:d5:bc:1d:87:ca:
                    3e:68:a4:ed:fe:63:9b:52:5c:75:c9:52:84:39:e8:
                    30:d4:dc:ed:ba:25:5a:c5:f5:2f:5d:d6:9d:f7:f3:
                    84:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:F8:9C:50:7E:DB:7A:18:E6:8D:06:E3:2E:1B:6D:16:0D:5E:A6:90
            X509v3 Authority Key Identifier:
                keyid:5E:02:46:BF:FE:04:E2:D6:F1:E1:93:9F:E6:38:6A:24:DF:CD:F7:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgJGv_4E4tbx4ZOf5jhqJN_N964.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5aa882-ee02-4c05-b744-4c91cb9ec98b/1/XgJGv_4E4tbx4ZOf5jhqJN_N964.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:09:e4:d4:f5:8f:ac:bc:46:4c:78:cc:2c:4b:63:3e:7e:a4:
         02:00:be:f9:67:ba:e5:55:ac:13:a6:5c:85:c9:2b:8f:59:aa:
         22:fe:62:c6:22:58:7e:b6:4c:f0:e0:d9:53:2e:73:7d:6a:47:
         02:69:a7:8f:94:3b:15:ee:e7:39:cd:1e:4b:a2:3b:b4:77:c2:
         f8:17:31:c7:b3:19:8f:cf:59:9f:df:e8:49:f2:90:66:cf:87:
         41:a7:28:0f:77:40:bc:ea:34:5c:8e:d3:36:2c:ec:11:18:93:
         af:a1:57:7d:39:a3:31:2d:1c:8e:f3:cc:cc:a0:84:b9:e9:82:
         a5:a1:fc:56:61:cf:5d:17:f4:60:dc:13:fc:de:2c:13:f1:05:
         ba:5c:ad:8a:9f:e8:4d:cd:1c:b3:d3:48:ef:81:a3:fb:fc:ae:
         78:ed:25:c9:43:c5:00:06:e9:bb:68:62:ae:7e:f6:7d:7e:68:
         3e:b1:90:27:cb:17:5b:9d:2a:b3:eb:06:6c:27:26:cf:22:b9:
         6a:5f:91:9e:ba:ad:d1:a6:95:b2:fa:f0:7a:9b:fc:35:49:9d:
         32:27:00:c9:0e:f8:8d:1c:23:de:bf:9c:1d:c6:66:4f:d3:8d:
         1f:62:72:1d:2b:62:04:b8:cd:86:3a:49:7d:43:fe:33:25:99:
         f4:95:31:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:47 2025 by rpki-client